Honza Bambas

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 70 Firefox ESR versions prior to 68.2 Thunderbird versions prior to 68.2 **Description** The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. This could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. The estimated number of potentially affected devices worldwide is not specified. **Recommendations** For Firefox versions prior to 70, update to version 70 or later. For Firefox ESR versions prior to 68.2, update to version 68.2 or later. For Thunderbird versions prior to 68.2, update to version 68.2 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 68 Firefox ESR versions prior to 60.8 Thunderbird versions prior to 60.8 **Description** The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. The vulnerability is associated with a buffer overflow in memory, allowing a remote attacker to execute arbitrary code. **Recommendations** For Firefox versions prior to 68, update to version 68 or later. For Firefox ESR versions prior to 60.8, update to version 60.8 or later. For Thunderbird versions prior to 60.8, update to version 60.8 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 52 Firefox ESR versions prior to 45.8 Thunderbird versions prior to 52 Thunderbird versions prior to 45.8 **Description** Memory safety bugs were reported, showing evidence of memory corruption. It is presumed that with enough effort, some of these bugs could be exploited to run arbitrary code. **Recommendations** For Firefox versions prior to 52, update to version 52 or later. For Firefox ESR versions prior to 45.8, update to version 45.8 or later. For Thunderbird versions prior to 52, update to version 52 or later. For Thunderbird versions prior to 45.8, update to version 45.8 or later.

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 51 Description: The issue arises from weak proxy objects having weak references on multiple threads when they should only have them on one, resulting in incorrect memory usage and corruption. This leads to potentially exploitable crashes. The issue only affects Firefox for Android, with other operating systems not being affected. Recommendations: For versions prior to 51, update to version 51 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 51 **Description** Memory safety bugs were reported, showing evidence of memory corruption. It is presumed that with enough effort, some of these bugs could be exploited to run arbitrary code. **Recommendations** For versions prior to 51, update to version 51 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 49.0 **Description** The issue is related to multiple unspecified vulnerabilities in the browser engine, which can cause a denial of service due to memory corruption and application crash, or possibly allow the execution of arbitrary code via unknown vectors. **Recommendations** For versions prior to 49.0, update to version 49.0 or later to resolve the issue.